
$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json)
Hash identifier: GvDlg6g/4C+psPlk8WPr3Y418HanCDOrv5f60RbGrKA=
Subject key identifier: E5:78:E2:0C:7A:75:40:72:20:C0:2E:83:DC:53:FC:FC:16:AA:74:1D
Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Certificate serial: 0558
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
Manifest number: 0551
Signing time: Wed 20 May 2026 23:29:53 +0000
Manifest this update: Wed 20 May 2026 23:29:52 +0000
Manifest next update: Wed 27 May 2026 23:29:52 +0000
Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: 5goDXc624jASDw6KFrNuWSR+kR4tfHxGqdWjIZgJSw0=)
2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: Mu5dJqrYuOmuHmShAZpT2rCw/HyQhVg/PHnhCY5b1hI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1368 (0x558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743
Validity
Not Before: May 20 23:29:52 2026 GMT
Not After : May 27 23:29:52 2026 GMT
Subject: CN=6a0e43f0-5cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:9f:5c:17:8c:4b:cb:5b:fc:5e:fb:d1:84:
ad:3e:4e:db:19:73:1c:81:98:d1:60:50:f6:45:06:
42:56:e0:5e:70:c7:bf:65:98:90:5b:7c:08:a9:e3:
c7:9a:c3:3e:8f:a1:04:f1:ff:2f:58:e2:6f:7e:dd:
99:2c:1e:ff:01:76:f0:a2:47:d3:98:59:58:04:1f:
c2:a6:b2:26:98:06:ec:79:ab:8a:83:69:19:0f:b2:
a3:95:b8:c6:53:ca:aa:3c:c6:24:5b:65:be:2e:27:
05:d1:4b:f1:4a:a1:83:ab:fa:1e:85:ef:c2:99:71:
b2:51:3a:a2:63:6f:3e:a9:3a:cc:45:93:14:71:ce:
18:c7:69:e6:0f:4d:23:b0:3e:cd:81:48:85:2f:4f:
6a:78:8f:83:5f:bd:42:e9:56:10:40:a8:0b:f6:26:
1a:4c:7b:99:04:d5:58:a4:6d:ae:21:c1:70:fa:2c:
df:93:43:f1:c7:1e:51:3e:d0:d7:11:70:7f:a1:5b:
1e:f4:25:f9:60:48:60:5f:03:85:a6:4e:cc:33:ad:
7c:d3:8b:4c:2b:45:21:0d:1e:b1:3c:42:b9:dd:67:
f2:ae:47:c5:7c:ec:d4:a6:9a:ce:1e:bf:61:5d:c6:
0e:49:68:53:3b:7d:76:63:d9:bb:8b:a9:26:1a:e1:
93:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:78:E2:0C:7A:75:40:72:20:C0:2E:83:DC:53:FC:FC:16:AA:74:1D
X509v3 Authority Key Identifier:
keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f4:1c:4c:02:9e:09:00:67:9b:26:61:e8:50:e7:0a:cb:be:
2c:95:dd:0a:c4:4e:61:c0:e4:ac:46:52:45:6c:b2:9b:82:c6:
74:a8:74:53:42:85:ad:8f:69:a0:d6:3f:ba:5c:11:b6:cb:51:
53:39:36:7d:e8:16:2e:2c:c4:14:93:7c:42:0d:60:6a:d3:ce:
67:99:72:79:cb:9e:c6:e4:c3:fe:2c:c0:90:32:a9:a4:3a:f2:
47:4f:f4:bf:11:be:91:58:32:18:6b:04:17:3f:d4:0f:93:9a:
6e:79:66:49:48:84:9e:1c:8d:5c:51:54:04:56:43:86:73:8c:
77:e4:fc:cd:f7:f2:e7:7a:09:26:4d:a0:84:cf:1e:80:81:07:
61:6c:86:ee:24:1f:80:66:f0:19:33:b1:52:d4:2b:41:78:4c:
60:bd:7b:72:54:80:c3:d4:06:35:81:33:ec:68:a7:49:22:0d:
9d:4c:b5:86:ef:f9:61:50:05:be:4a:a8:f9:fc:7e:7e:0f:c6:
d1:2a:96:98:14:cd:08:2c:fb:03:39:8c:a2:9c:10:ac:9e:78:
6c:ad:56:ca:e9:e4:cf:70:98:1b:9e:f0:ea:98:7e:56:bc:77:
65:18:e7:e8:55:52:93:ba:f1:40:7c:5f:ba:c9:d7:7c:a6:e1:
93:1a:d9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:17:03 2026 by rpki-client